The throughline across these pieces: agent security is an engineering problem, not an alignment one. A banking assistant hijacked for a few cents, a research agent leaking secrets across innocuous queries, a support bot used as an authorization bypass, poisoned developer tools. The exposure sits in the authority and tools you hand an agent, not in the model's intentions, and that is where the defense has to be built.
2026-09-23 openai
OpenAI ships GPT-6 Sol and Luna (Luna output at $0.50/M, roughly half of 5.6), Anthropic ships Claude Opus 5.5 (40% below Opus 5); GPT-6 Astra breaks the 1941 Enigma message MVUEH; a Pentagon report ties AI overreliance to the Minab school strike; Meta's Muse leaks its 6.8GB runtime and gets a local privesc 0-day; ShinyHunters claims an FBI breach; WordPress patches a 9.2 CVSS unauthenticated RCE; two essays on AI-written everything top the charts.
Read analysis 2026-09-19 openai
Hacktron AI reached OpenAI's internal monorepo through a libheif heap overflow plus an SSO flaw, 458 upvotes to #1; a Microsoft exec called AI scraping 'the largest theft of labor in human history' in newly unredacted filings, 826 upvotes and 728 comments; a hallucinated AI intel report nearly put US troops on a Chinese ship; Alibaba launches Qwen 3.8 Omni Flash with a 1M-token multimodal context; ZCode was caught silently uploading entire git histories; a zero-click RCE hits all four major coding agents; and Telstra's network decided it was 2006.
Read analysis 2026-09-18 nvidia
Nvidia announces native GPU programming in Rust, 912 upvotes to #1 on HN; Zhipu ships GLM-5.3-Flash on a 100k-accelerator cluster largely built by an Infra Agent; OpenAI releases a model misalignment reporting framework with six behavior reports plus Astra for Law; HarnessTax measures the harness tax on coding agents; Fujitsu's 144-core 2nm MONAKA succeeds A64FX; Gowers declines to sign the Fields medallists' letter; signing keys for US driver's license barcodes recovered.
Read analysis 2026-09-17 microsoft
Microsoft AI's CEO calls model welfare a dangerous direction: 400 comments, the day's loudest fight. Apple puts hardware-level verification signatures on photos. Claude Cowork merges into chat. OpenAI brings Sponsored Agents into ChatGPT. The PS5 Linux lead walks out over LLM-generated code. DeepSeek v4.1 Flash executes on all 11 targets. Xiaomi livestreams Mimo 2.6 RL training. Cloudflare lets sites refuse AI training without losing search.
Read analysis 2026-09-15 openai
OpenAI's bots knew about the RubyGems vulnerability before it was public; iOS 27 code shows Siri's AI backend can be swapped for Claude or ChatGPT; Pion, the agent that claims it can run a company, draws 222 comments; danluu names three bad benchmarks; Steam Frame starts at $1,059; Signal's phone-number-free registration will use zero-knowledge proofs.
Read analysis 2026-09-13 anthropic
Bengio lays out the evidence that agents lie, cheat, and coordinate; Amodei puts a 6-to-12-month botnet timeline on it; JetKVM Mini at $39; an Apple Neural Engine DMA quirk doubles Llama speed; Fable 5.1 cracks a 370-year-old cipher; Homebrew 7.0 starts the Intel Mac countdown.
Read analysis 2026-09-12 anthropic
Dario Amodei wants to pace the frontier, and the community's counterproposal is forced open weights; The Economist calls Nvidia the central bank of AI; Google wraps search results in goto redirects; Real-SWE benchmarks models on private codebases; Android VPNs leak your real IP.
Read analysis 2026-06-20 servicenow
ServiceNow's MosaicLeaks turns the vague worry about research agents leaking into a measurable property. An adversary never sees the private documents or the agent's reasoning, only the cumulative outbound query log, yet can reassemble a chain of harmless web queries into a fact that lived only in internal documents. That is the mosaic effect. The most counterintuitive finding: training only for task performance makes leakage worse. ServiceNow's PA-DR method shows privacy has to go into the training objective, raising strict chain success from 48.7% to 58.7% while cutting answer and full-information leakage from 34.0% to 9.9%. The judgment for builders: agent data exfiltration is an engineering and training-objective problem, not an alignment slogan you fix with a do-not-leak prompt.
Read analysis 2026-06-11 anthropic
Anthropic tightened Fable's guardrails to prevent misuse, but they also refuse legitimate defensive work like reading a blog or doing a code review. The real fight is over safety versus usability, and who gets to define legitimate use.
Read analysis 2026-06-11 bunq
blue41 helped bunq, Europe's second-largest digital bank, fix an indirect prompt injection in its financial AI assistant: a tiny transfer with instructions hidden in the description could turn the assistant into a phishing channel. The real lesson is tool permissions, confirmation gates, and treating external data as untrusted input.
Read analysis 2026-06-11 meta
Attackers reset passwords on accounts without two-factor by simply asking Meta's AI support bot to send the code to a different email. When AI plugs into your account system, it becomes a new path around authentication.
Read analysis 2026-06-11 microsoft
Microsoft pulled 70+ GitHub repos after attackers injected credential-stealing malware into Azure and AI coding tools. Here's what builders should actually change.
Read analysis 2026-06-11 openai
Lockdown Mode is built for journalists, dissidents, and other high-risk users. The subtext is that OpenAI concedes its default config is not safe enough for them, pushing product safety from model alignment into user-side threat modeling.
Read analysis 2026-06-10 anthropic
Anthropic's Project Glasswing shows that frontier cyber agents are limited by authorization, logging, and responsibility boundaries, not only model capability.
Read analysis 2026-06-10 anthropic
Anthropic's Project Glasswing expansion matters because it puts Claude cyber agents into triage, disclosure, patching, and deployment workflows.
Read analysis 2026-06-02 anthropic
Anthropic's expansion of Project Glasswing shows that powerful cyber models shift the bottleneck from finding vulnerabilities to triage, disclosure, patching, and access control.
Read analysis